Skip to content
OpenAdvisories

Vendor

pluginbuilders

11 known vulnerabilities.

Products

YourChannel: Everything you want in a YouTube plugin. 7 Waiting: One-click countdowns 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2023-2757

    Waiting: One-click countdowns <= 0.6.2 - Missing Authorization Checks leading to Authenticated (Subscriber+) Stored Cross-Site Scripting

    The Waiting: One-click countdowns plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on 'saveLang' functions in versions up to, and including, 0.6.2. This could lead to Cross-Site Scripting due to insufficient input s…

    pluginbuilders Waiting: One-click countdowns Web / CMS